Full compliance with the LGPD — Law No. 13,709/2018

Privacy Policy of 18abet: LGPD and Your Data

Here you'll find exactly what data 18abet collects, why it's used, who it's shared with, and what your rights are as a data subject — no runaround, no unnecessary legal jargon.

Last updated: January 10, 2026

How 18abet protects your privacy

Six pillars that keep your data safe on our platform

LGPD Compliance

18abet fully complies with the General Data Protection Law (Law No. 13,709/2018). Every data processing activity has an identified and documented legal basis, ensuring that nothing happens to your information without clear legal grounds.

Bank-Grade SSL Encryption

All communication between your phone or computer and 18abet's servers is protected by TLS 1.3 — the same encryption standard used by major Brazilian banks such as Itaú, Bradesco, and Nubank.

Control in Your Hands

You can access, correct, port, or delete your personal data at any time by emailing privacidade@18abet.best. We respond to all requests within 15 business days as required by the LGPD.

Your Data Is Never Sold

18abet does not sell, rent, or transfer personal data to third parties for commercial purposes. Any necessary sharing takes place solely with partners that process data strictly to operate the platform, under confidentiality agreements.

Data Minimization

18abet collects only the data strictly necessary to operate the platform and meet legal obligations. We do not request information that is not relevant to your experience or to the security of the platform.

Incident Notification

In the event of a security incident that may affect your data, 18abet notifies the National Data Protection Authority (ANPD) and the affected individuals within the timeframes established by the LGPD, with full transparency about what occurred.

How to use this document: this Privacy Policy explains how 18abet processes your personal data in accordance with the General Data Protection Law (LGPD — Law No. 13.709/2018). By creating an account or using any service on the platform, you confirm that you have read and understood this document. If you have any questions, please contact our data protection officer by email at privacidade@18abet.best.

Introduction Read first

A 18abet has a genuine commitment to its users' privacy. This Privacy Policy was written to actually be read — not to sit buried in the site footer. We want you to clearly understand, in plain terms, what we do with your personal information when you use the platform.

18abet collects and processes personal data to operate its Sports Betting and online casino platform, process payments via Pix, bank slip, and credit/debit card, provide support in Portuguese, and comply with the legal obligations applicable to the sector in Brazil. Each data processing activity has a specific purpose and a defined legal basis under the LGPD.

This Policy applies to all registered users of 18abet, visitors to the site, and anyone whose data is processed by the platform in the course of its operations. For any 18abet products or services that have their own specific policies, this document applies in a complementary capacity.

Data Controller

The data controller responsible for processing your personal data at 18abet is the company operating the platform available at https://18abet.best. All decisions about how and why your data is processed are made by this entity.

18abet has appointed a Data Protection Officer (DPO) as required by the LGPD in situations where the volume or sensitivity of the data processed warrants it. The DPO is the official channel for exercising your rights as a data subject and for any questions regarding this Policy.

Data Protection Officer (DPO) contact: privacidade@18abet.best — available to receive data subject requests, ANPD communications, and matters related to personal data protection on the platform. Response time: up to 15 business days.

What Data We Collect

18abet collects different categories of personal data depending on how you use the platform. Below is a transparent breakdown of each category:

Registration and identity data

  • Full name as it appears on an official ID document
  • CPF (Cadastro de Pessoas Físicas) — required by law for user identification
  • Date of birth — for age verification
  • Email address — for communications and account recovery
  • Brazilian mobile phone number
  • Full residential address in Brazil

Identity verification data (KYC)

  • Copy of an official photo ID (national ID, driver's license, or passport)
  • Proof of address issued within the last 90 days
  • Selfie with document, when requested for liveness verification

Financial and transaction data

  • Pix key registered to the account holder's CPF for withdrawal processing
  • Credit/debit card data (processed in tokenized form by PCI-DSS certified processors — 18abet does not store full card numbers)
  • Deposit and withdrawal history — amounts, dates, and payment methods used
  • Pix, bank slip, and other payment method transaction identifiers

Platform usage data

  • Sports betting history — events, odds, amounts, and outcomes
  • Casino game history — slots, crash games, live casino, poker
  • Session duration and access frequency
  • Gaming preferences and account settings

Technical and access data

  • IP address and approximate geolocation
  • Browser type and version, and operating system
  • Device identifier (mobile, tablet, desktop)
  • Access logs with date, time, and actions performed on the platform
  • Cookie and similar technology data (detailed in section 9)

Communication and support data

  • Content of live chat conversations with the support team
  • Emails and messages exchanged with 18abet
  • Voice call recordings, where applicable, with prior notice

How We Use Your Data

18abet uses your personal data solely for the purposes described below. We do not process data for purposes that are incompatible with the context in which it was collected:

Purpose Data used Reason
Create and manage your account Name, CPF, email, phone number, address Contract performance
Process deposits and withdrawals Financial data, Pix key, CPF Contract performance
Verify your identity (KYC) Documents, CPF, selfie Legal obligation (AML)
Prevent fraud and money laundering Transactions, IP, history, documents Legal obligation
Provide user support Account data, gaming history, communications Contract performance
Send account-related communications Email, mobile Legitimate interest / contract
Improve the platform Usage data, logs, analytical cookies Legitimate interest
Comply with legal and tax obligations CPF, financial data, history Legal obligation
Apply responsible gambling tools Betting history, deposits, session duration Legitimate interest / contract

Legal Bases for Data Processing (LGPD) Art. 7º

The LGPD requires that every processing of personal data have an identified legal basis. 18abet relies on the following legal bases set out in Article 7 of Law No. 13,709/2018:

Contract performance (Art. 7, V)

Most of the data processed by 18abet is legally grounded in the execution of the contract entered into with the user at registration. This covers the processing of deposits and withdrawals, account management, bet settlement, and customer support. Without this data, it would be impossible to operate the platform for you.

Legal or regulatory obligation (Art. 7, II)

18abet is legally required to collect and retain certain data to comply with legal obligations — including user identification for anti-money laundering (AML) purposes, retention of financial records for tax purposes, and disclosure of information to competent authorities when required by court order or applicable law.

Legitimate interest of the controller (Art. 7, IX)

Some processing activities are based on 18abet's legitimate interests, provided they do not override the fundamental rights and freedoms of data subjects. This includes platform improvements based on usage data, detection of fraudulent behavior, and sending relevant operational communications related to your account. You may object to processing based on legitimate interests by contacting the DPO by email.

Consent (Art. 7, I) — where applicable

For processing activities that do not fall under the bases above — such as sending marketing communications about 18abet promotions and updates — we request your explicit consent. You may withdraw that consent at any time without affecting your normal access to the platform.

Data Sharing

18abet does not sell personal data. Data is only shared with third parties in the cases listed below, always under contractual guarantees of confidentiality and security:

Payment processors

To process deposits via Pix, bank slip (boleto bancário), credit/debit card (Visa, Mastercard, Elo), PicPay, and Mercado Pago, 18abet shares financial and identity data with the relevant payment processors. These companies act as data operators and are contractually required to use the data solely for the purpose of processing the transaction.

Identity verification (KYC) providers

To meet its anti-money laundering obligations, 18abet may share identity documents and registration data with companies specializing in digital identity verification (KYC). These providers are certified and operate under data processing agreements aligned with the LGPD.

Game providers

Slots, crash games, and live casino developers that supply games to 18abet receive anonymous or pseudonymized technical identifiers for game operation purposes. We do not share full identity data with game providers.

Competent authorities

18abet may share personal data with government, judicial, or regulatory authorities when required by law, court order, or compliance with regulations applicable to the betting sector in Brazil.

International transfers: some technology and game providers may be based outside Brazil. In these cases, 18abet ensures that international data transfers occur only to countries or organizations offering an adequate level of data protection, as determined by the ANPD, or through the adoption of appropriate contractual safeguards.

Data Retention

18abet retains your personal data for as long as necessary for the purposes for which it was collected, in compliance with mandatory legal retention periods:

  • Registration data and active account: retained throughout the lifetime of the account and for up to 5 years after closure, for legal compliance purposes
  • Financial records and transactions: retained for a minimum of 5 years in accordance with tax and anti-money laundering legislation
  • KYC documents: retained for a minimum of 5 years after the last transaction, in accordance with the recommendations of the Financial Activities Control Council (COAF)
  • Access logs: retained for 6 months in accordance with the Brazilian Civil Rights Framework for the Internet (Law No. 12,965/2014) and for up to 1 year for security purposes
  • Support and communications data: retained for up to 2 years after the ticket is closed
  • Non-essential cookie data: deleted in accordance with each cookie's expiry period or upon withdrawal of consent

Once the retention periods above have expired, data is securely deleted or irreversibly anonymized so that the individual can no longer be identified.

Information Security

18abet employs a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure:

Technical measures

  • Encryption in transit: TLS 1.3 on all communications between client and server
  • Encryption at rest: sensitive data stored with AES-256 encryption
  • Card data tokenization: card numbers are never stored on 18abet's servers — only tokens generated by the PCI-DSS certified processor are retained
  • Two-factor authentication (2FA) available for user accounts
  • Continuous monitoring of system access and suspicious activity
  • Regular penetration testing and vulnerability assessments

Organizational measures

  • Access to personal data restricted to employees with a proven operational need
  • Regular information security and privacy training for all team members
  • Confidentiality agreements with all employees and third parties who have access to personal data
  • Documented incident response policy with defined notification timelines

User responsibility: your account security also depends on you. Use a strong, unique password for 18abet, never share your credentials with anyone, enable 2FA in your account settings, and be cautious of emails or messages asking for your password. 18abet will never ask for your password through any channel.

Cookies and Similar Technologies

18abet uses cookies and similar technologies to ensure the platform runs correctly, analyze site usage, and personalize the user experience. Below is a clear explanation of the types of cookies used:

Essential cookies

These are required for the basic operation of the platform — such as keeping your session active while you browse, remembering your betting slip, and ensuring transactions are processed correctly. These cookies cannot be disabled without affecting your ability to use the platform. They do not require consent, as they are essential to the contracted service.

Analytical cookies

Used to understand how users interact with the platform — which pages are visited most, where drop-offs occur, and how to improve the overall experience. Data is aggregated and does not identify individual users. These can be disabled without affecting platform functionality.

Functionality cookies

They remember your preferences — such as language, displayed odds settings, and active notifications — to personalize your experience on future visits. They can be disabled, but some preferences will need to be reconfigured on each visit.

How to manage cookies

You can manage cookies directly in your browser settings — Chrome, Safari, Firefox, and other browsers let you view, delete, and block cookies by domain. Please note that disabling essential cookies will prevent normal access to the 18abet platform.

Minors +18 only

18abet is a platform exclusively for users aged 18 and over. We do not knowingly collect personal data from anyone under 18, and we do not allow minors to create or use accounts on the platform.

If you are a guardian and suspect that a minor has created an account on 18abet, please contact our 24-hour support team immediately. The account will be preventively blocked, any deposited funds will be returned after verification, and the minor's data will be deleted from our systems.

18abet applies age verification checks at the point of registration, including CPF validation and, when necessary, document requests to confirm the user's age. If a user is found to be under 18 after registration, the account is immediately closed and the matter is reported as required by law.

Your Rights as a Data Subject LGPD Art. 18

The LGPD grants you — the data subject — a robust set of rights over your personal data. 18abet is committed to respecting and facilitating the exercise of all of them:

Your 8. Rights guaranteed by the LGPD

Exercise any of these rights by emailing privacidade@18abet.best — we respond within 15 business days

1
Confirmation & Access

Confirm whether 18abet processes your data and obtain a copy of the personal data held about you, in a readable format.

2
Correction

Request the correction of incomplete, inaccurate, or outdated data — such as your address, email, or phone number.

3
Anonymization, Blocking, or Deletion

Request the anonymization or deletion of unnecessary data or data processed in violation of the LGPD.

4
Portability

Request the portability of your data to another service provider, in a structured and commonly used format.

5
Deletion upon Consent Withdrawal

Where processing is based on your consent, you may withdraw that consent and request deletion of the data processed on that basis.

6
Information on Data Sharing

Know which public and private entities 18abet shares your data with and the reasons for that sharing.

7
Information on Non-Consent

Be informed of the option to withhold consent and the consequences of doing so for your use of the platform.

8
Right to Object

Object to processing based on legitimate interest, provided your reasons outweigh 18abet's legitimate interests.

How to exercise your rights: send an email to privacidade@18abet.best with a subject line corresponding to the right you wish to exercise (e.g., "Personal Data Access Request — LGPD"), including your full name, CPF, and registered email address. 18abet will respond within 15 business days. If your request is denied with justification, you may submit a complaint to the National Data Protection Authority (ANPD).

Anti-Money Laundering (AML)

18abet maintains Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) policies and procedures in compliance with Brazilian legislation applicable to the online betting and entertainment sector. This involves processing personal data for the following purposes:

  • User identity verification prior to withdrawal approval (KYC)
  • Monitoring of financial transactions to identify unusual patterns
  • Recording and retention of transaction data for the minimum period required by law
  • Reporting suspicious transactions to the Financial Activities Control Council (COAF) when required by applicable regulations

Data processing for AML purposes is based on a legal obligation (Art. 7, II of the LGPD) and cannot be opposed by the data subject. This data is retained for a minimum of 5 years following the user's last transaction, as determined by applicable industry regulations.

Important: user cooperation with the KYC process is mandatory for withdrawal authorization. Refusing to provide documents requested for AML purposes may result in a temporary suspension of withdrawals until verification is complete, in accordance with 18abet's legal obligations.

Changes to This Policy

18abet may update this Privacy Policy periodically to reflect changes in data processing practices, applicable legislation, or platform features. The date of the most recent update is always shown at the top of this document.

Material changes — such as updates to the purposes of processing, the data collected, or data subjects' rights — will be communicated by email to the registered address and via a notification in the account dashboard, at least 15 days before they take effect.

Continued use of the platform after an update's effective date constitutes acceptance of the revised Policy. If you do not agree with the changes, you may close your account and request deletion of your data as described in Section 11 of this Policy.

Previous versions of this Policy are archived and can be requested via the DPO's email for historical reference purposes.

Contact, DPO & Reporting Channel

To exercise your rights as a data subject, ask questions about this Policy, or report any privacy concern, please use the channels below:

  • Data Protection Officer (DPO) — LGPD: privacidade@18abet.best
  • General support, 24 hours: live chat on the platform after login
  • General support email: contato@18abet.best
  • Response time for LGPD requests: up to 15 business days

If, after contacting 18abet, you feel your request was not handled appropriately, you have the right to file a complaint with the National Data Protection Authority (ANPD), the regulatory body responsible for overseeing LGPD compliance in Brazil, through the official ANPD portal.

18abet is committed to responding to all data subject requests with seriousness, transparency, and within the legally required timeframes. Our users' privacy is not a marketing talking point — it is a responsibility we take seriously in our day-to-day operations.

Ready to play with security at 18abet?

Your data protected by LGPD, bank-grade SSL encryption, and 24/7 support in Portuguese. Sign up in under 2 minutes.

LGPD compliant TLS 1.3 Encryption Data never sold 24/7 support in Portuguese
Questions about your data? Talk to our DPO

To exercise any right guaranteed by the LGPD — access, correction, portability, or deletion of your personal data — please contact our Data Protection Officer by email at privacidade@18abet.best. We respond within 15 business days. For more information about your Terms and Conditions of the platform, visit the full page.

Play Responsibly. Sports Betting and casino games are entertainment — not a guaranteed source of income. Set deposit and session time limits before each session on 18abet. Never bet amounts that could put your personal or family finances at risk. Self-exclusion tools and configurable limits are available at Responsible Gambling. Platform exclusively for users aged 18 and over.
Learn More

Questions about the Privacy Policy

The most common questions from 18abet users about privacy and data protection

No. 18abet does not sell, rent, transfer, or otherwise commercialize users' personal data with third parties for marketing or any other commercial purpose. Your data is shared only with the operational partners strictly necessary to run the platform — such as payment processors (to handle your Pix, bank slip, or credit card) and KYC providers (for identity verification) — always under confidentiality agreements. Data is shared with competent authorities only when required by law or court order.

To request deletion of your data, send an email to privacidade@18abet.best with the subject line "Data Deletion Request — LGPD", including your full name, CPF, and registered email address. We will respond within 15 business days. Please note that some data must be retained for legally mandated periods — such as financial records (minimum 5 years) and access logs (minimum 6 months) — even after account closure. In these cases, we will clearly inform you which data is retained, the legal basis for doing so, and the expected date of permanent deletion.

No. 18abet does not store your full credit or debit card number on its servers. When you make a deposit by card, the data is processed directly by a PCI-DSS certified payment processor, which returns only a token — a secure identifier that enables future transactions without the platform ever storing your actual card details. This is the same standard used by Brazil's largest e-commerce platforms and digital banks.

Identity verification (KYC — Know Your Customer) before the first withdrawal, or on higher-value transactions, is a legal requirement imposed on online betting and entertainment platforms in Brazil for anti-money laundering and counter-terrorism financing purposes. 18abet follows the guidelines of COAF (Financial Activities Control Council) and applicable industry regulations. The KYC process is completed once, typically within a few hours, and ensures that your account balance is released only to the right person. All documents are handled with complete confidentiality and stored securely for the minimum period required by law.

In the event of a security incident that could pose a significant risk or harm to data subjects, 18abet will follow its documented incident response plan: immediate containment to limit the scope of the issue, notification to the National Data Protection Authority (ANPD) within the timeframe established by the LGPD, and direct communication to affected users by email, detailing what happened, which data was involved, the steps taken to mitigate the damage, and what actions users should take. 18abet applies encryption at rest and strict access controls precisely to minimize the impact of any potential incident.
Português